AI Governance Institute
← News
Research2026-07-04

Voluntary AI Commitments Are Not Enough: Brookings Calls on G7 to Make Behavioral Standards Legally Enforceable

What happened

Tom Wheeler, a senior fellow at the Brookings Institution, published G7 should accept AI standards offer, but make it enforceable on June 15, 2025, arguing that the G7 should formalize and mandate adherence to behavioral AI standards rather than relying on the voluntary compliance model that has characterized international AI governance to date. The analysis points to the G7 Hiroshima AI Code of Conduct and related voluntary frameworks as the correct starting architecture, but contends that without enforcement mechanisms those standards create an uneven playing field and leave users exposed. Wheeler specifically calls for a participatory standards-setting process that includes civil society alongside governments and industry, echoing concerns raised in prior multilateral forums about the capture of standards bodies by commercial interests. The piece positions enforceable harmonized norms as a precondition for both protecting users and providing developers with the legal certainty needed to operate across G7 jurisdictions without regulatory arbitrage.

Why it matters

  • ·Voluntary AI commitments that enterprises currently map to their compliance programs could be reclassified as legally enforceable obligations if G7 governments act on this analysis, requiring organizations to upgrade informal alignment exercises into audit-ready conformity assessments.
  • ·A shift toward enforceable international standards would compress the window available to compliance teams for gap remediation, since multi-jurisdictional harmonization typically triggers simultaneous regulatory updates across the EU, US, UK, Japan, and Canada rather than sequential national implementations.
  • ·Organizations that have structured AI governance programs around the current voluntary framework landscape face structural rework risk: controls calibrated to 'best efforts' norms may fall below the evidentiary threshold required by legally binding behavioral standards.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

What to do now

  • ☐Audit your existing voluntary AI commitment mapping (e.g., G7 Hiroshima Code of Conduct, OECD AI Principles) to identify which obligations would require control upgrades if converted to enforceable requirements.
  • ☐Brief your board AI governance committee on the Brookings analysis and establish a formal watch item for G7 AI standards enforcement proposals in the second half of 2025.
  • ☐Engage your regulatory affairs and government relations functions to monitor G7 working group outputs and flag any draft enforcement language as it surfaces in official communiques.
  • ☐Review your multi-jurisdiction AI regulatory compliance mapping to identify jurisdictions where voluntary G7 standards overlap with existing binding obligations, and prioritize those gaps for near-term remediation.
  • ☐Update your voluntary AI framework obligation tracker to flag each commitment with an 'enforceability risk' indicator, distinguishing frameworks with active legislative pipelines from those with no current enforcement pathway.

What to watch next

Compliance teams should monitor the outcomes of the upcoming G7 Leaders' Summit and any subsequent AI working group communiques for language signaling a shift from voluntary to binding standards. The EU AI Office's ongoing engagement with international standards bodies, including ISO/IEC JTC 1/SC 42, will be an early indicator of how enforceable behavioral norms might be operationalized within existing conformity assessment infrastructure. Parallel developments at the OECD and the UN Global Dialogue on AI Governance may accelerate the timeline if G7 members seek multilateral cover for enforcement mandates that go beyond the current voluntary architecture.

Related Coverage

Research2026-10-25

National AI Evaluation Programs Are Expanding Into Agentic Risk

A Brookings Institution report finds that national AI evaluation programs in Singapore, Japan, the UK, and elsewhere are moving beyond basic safety benchmarks. The new scope covers multilingual behavior, agentic risk, sensitive data leakage, fraud, and cybersecurity. Enterprises whose vendor due diligence relies on earlier, narrower testing norms now face a shifting standard for what a tested and safe AI system actually means.

Corporate Policy2026-10-31

CeSIA Calls for AI Act Enforcement on Offensive-Capable Models

France's Centre for Strategic and International Affairs (CeSIA) has published emergency policy recommendations linking AI-powered cyberattacks to gaps in both EU cybersecurity and AI governance law. CeSIA calls for enforcing EU AI Act risk controls on models with offensive cyber capabilities, independent evaluations of those models, and deployment restrictions where risks cannot be managed. It also urges faster NIS2 transposition and additional resources for France's national cybersecurity agency, ANSSI.

Research2026-10-30

75% of IT Leaders Say Compliance Constrains AI Scale, Cloudera Survey Finds

A Cloudera survey of enterprise IT leaders found that 75% view governance and compliance as a constraint on scaling AI, while 55% reported governance costs grew faster than expected. The findings expose a structural gap between how fast AI is being deployed and how well organizations have planned the programs that govern it. The survey covered AI inventory, regulatory mapping, model risk controls, data sovereignty, and third-party oversight.